$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b9fea0b6-2ff5-3a0c-85d0-6d7dcd1bb249.roa File: b9fea0b6-2ff5-3a0c-85d0-6d7dcd1bb249.roa (raw, json) Hash identifier: pNoRr+tjJm+FSvkc1ADBZi/gbjANaSLdq6Y7e/UWBvs= Subject key identifier: 71:CB:31:AD:6B:D2:91:93:62:2E:0C:25:D1:DE:B2:C7:5F:81:93:D1 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20AAE4B418E4FDFEA3C21C0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b9fea0b6-2ff5-3a0c-85d0-6d7dcd1bb249.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 159.111.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:ae:4b:41:8e:4f:df:ea:3c:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=d8cc781e-52a4-4a3e-9198-c5eb805714ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:72:b6:17:d7:34:6b:df:51:02:4b:9e:a9:b5: b1:d8:e7:0d:e4:e5:f1:80:7a:d5:44:9b:7a:c3:53: 85:31:6f:52:ca:b2:1f:23:a7:06:41:4f:88:fd:d9: c2:3c:3f:24:47:ba:e3:aa:5c:ae:4a:52:c1:02:fe: eb:9c:60:4b:2e:07:66:de:31:3a:87:74:86:fb:5a: cc:bf:b2:9a:d0:31:a9:f2:dd:35:45:46:7f:7f:d3: b2:31:88:f4:bb:3f:3b:03:b3:2b:ce:d3:ba:b2:e5: e1:c8:de:1e:9e:0c:72:c4:e5:d0:33:9a:7d:56:9a: ce:23:25:ed:31:cf:d1:10:31:9e:36:bb:c3:c8:9e: dd:27:7d:c7:fb:c7:97:a6:39:b9:d4:58:7b:8c:0c: 8f:6a:91:a2:89:1f:e9:23:2f:4a:91:b9:51:c4:47: 99:76:c3:65:42:0a:e3:9f:64:a8:41:e1:18:c6:2b: 81:2f:8f:c0:36:11:17:d5:23:48:32:d4:46:e7:53: ea:40:f5:02:a8:46:ea:6e:3a:5e:7f:28:5c:53:3d: bf:d3:30:53:ad:a6:26:92:de:ec:74:0e:e3:2f:c7: f6:5c:70:61:08:8b:e9:d6:58:1e:88:48:e5:35:85: c2:8d:ef:1f:16:ca:b6:c3:fd:fc:3a:d6:df:06:c9: 44:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CB:31:AD:6B:D2:91:93:62:2E:0C:25:D1:DE:B2:C7:5F:81:93:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b9fea0b6-2ff5-3a0c-85d0-6d7dcd1bb249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 159.111.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:31:e0:bc:79:21:84:41:e7:7f:91:c6:b2:4f:1d:47:07:8b: 5b:d2:01:e7:5a:5f:d2:11:2d:f4:60:70:8f:c4:70:e0:2c:e7: 85:f4:21:f3:3e:d9:58:ac:6c:70:60:63:d7:15:0e:71:df:ca: c0:6b:19:7c:52:b9:83:7c:9c:82:f9:e0:ac:66:dd:b4:8b:bc: 90:2b:fc:26:ea:ae:fe:8d:c0:c0:14:6b:bb:3a:89:e0:a7:ff: 9c:15:4c:a4:f2:f4:a2:dd:f7:79:13:4d:2a:8d:28:84:0e:a0: 04:d3:6d:a3:fc:22:41:03:d5:ee:88:aa:6e:f0:7f:10:c0:e2: 74:25:ad:f6:40:62:93:ff:d3:63:c6:dc:97:58:4e:09:95:27: f3:b9:35:bc:de:d9:d6:aa:28:0a:0e:ae:1e:9e:00:af:74:16: 7a:7c:c6:6f:a7:3a:b9:54:e6:8d:43:a5:61:7c:38:67:9b:e4: ce:5a:e0:bd:d2:9d:c1:ad:4f:43:0b:61:e2:bd:e9:1d:06:ef: 2d:54:2a:2d:99:0d:e5:52:d4:de:c7:2b:78:7b:ed:25:4a:f7: 9b:45:93:1a:c7:7d:3c:6a:48:6a:3b:4e:3c:c4:ed:f4:43:d5: 59:b5:3a:1b:d6:e5:59:31:31:d0:89:c8:06:93:d2:91:ea:d8: c4:10:6d:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCq5LQY5P3+o8IcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZDhjYzc4MWUtNTJhNC00YTNlLTkxOTgtYzVlYjgwNTcxNGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHK2F9c0a99RAkueqbWx2OcN5OXxgHrVRJt6 w1OFMW9SyrIfI6cGQU+I/dnCPD8kR7rjqlyuSlLBAv7rnGBLLgdm3jE6h3SG+1rM v7Ka0DGp8t01RUZ/f9OyMYj0uz87A7MrztO6suXhyN4engxyxOXQM5p9VprOIyXt Mc/REDGeNrvDyJ7dJ33H+8eXpjm51Fh7jAyPapGiiR/pIy9KkblRxEeZdsNlQgrj n2SoQeEYxiuBL4/ANhEX1SNIMtRG51PqQPUCqEbqbjpefyhcUz2/0zBTraYmkt7s dA7jL8f2XHBhCIvp1lgeiEjlNYXCje8fFsq2w/38OtbfBslEqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHLMa1r0pGTYi4MJdHessdfgZPRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjlmZWEwYjYtMmZmNS0z YTBjLTg1ZDAtNmQ3ZGNkMWJiMjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDn2/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMx4Lx5IYRB53+RxrJPHUcHi1vSAedaX9IRLfRgcI/EcOAs54X0IfM+ 2VisbHBgY9cVDnHfysBrGXxSuYN8nIL54Kxm3bSLvJAr/Cbqrv6NwMAUa7s6ieCn /5wVTKTy9KLd93kTTSqNKIQOoATTbaP8IkED1e6Iqm7wfxDA4nQlrfZAYpP/02PG 3JdYTgmVJ/O5Nbze2daqKAoOrh6eAK90Fnp8xm+nOrlU5o1DpWF8OGeb5M5a4L3S ncGtT0MLYeK96R0G7y1UKi2ZDeVS1N7HK3h77SVK95tFkxrHfTxqSGo7TjzE7fRD 1Vm1OhvW5VkxMdCJyAaT0pHq2MQQbec= -----END CERTIFICATE-----Generated at Fri May 9 14:36:17 2025 by rpki-client